Bug 1455141 - [Mac] Enable sandboxing for the Flash NPAPI plugin process on Beta r=Alex_Gaynor
authorHaik Aftandilian <haftandilian@mozilla.com>
Fri, 27 Apr 2018 15:04:35 -0700
changeset 472443 52934e51cf6fbaff259197930481bca53fa6b378
parent 472442 2a88d31a05cdf4b5660f3d7fbe088e0c6818fa2b
child 472444 8480289cd4393653c55b23b0099347751d01dcd8
push id1728
push userjlund@mozilla.com
push dateMon, 18 Jun 2018 21:12:27 +0000
treeherdermozilla-release@c296fde26f5f [default view] [failures only]
perfherder[talos] [build metrics] [platform microbench] (compared to previous push)
reviewersAlex_Gaynor
bugs1455141
milestone61.0a1
first release with
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
last release without
nightly linux32
nightly linux64
nightly mac
nightly win32
nightly win64
Bug 1455141 - [Mac] Enable sandboxing for the Flash NPAPI plugin process on Beta r=Alex_Gaynor Enable the Flash sandbox on Beta and Nightly builds, but not on Release. MozReview-Commit-ID: 97EXJDjf1vV
browser/app/profile/firefox.js
--- a/browser/app/profile/firefox.js
+++ b/browser/app/profile/firefox.js
@@ -1084,17 +1084,18 @@ pref("security.sandbox.gmp.win32k-disabl
 // 3 -> "no global read/write access, read access permitted to
 //       $PROFILE/{extensions,chrome}"
 // This setting is read when the content process is started. On Mac the content
 // process is killed when all windows are closed, so a change will take effect
 // when the 1st window is opened.
 pref("security.sandbox.content.level", 3);
 #endif
 
-#if defined(NIGHTLY_BUILD) && defined(XP_MACOSX) && defined(MOZ_SANDBOX)
+// Enable the Mac Flash sandbox on Nightly and Beta, not Release
+#if defined(EARLY_BETA_OR_EARLIER) && defined(XP_MACOSX) && defined(MOZ_SANDBOX)
 // Controls whether and how the Mac NPAPI Flash plugin process is sandboxed.
 // On Mac these levels are:
 // 0 - "no sandbox"
 // 1 - "write access to some Flash-specific directories and global
 //      read access triggered by file dialog activity"
 // 2 - "no global read access, read and write access to some
 //      Flash-specific directories"
 pref("dom.ipc.plugins.sandbox-level.flash", 1);